From owner-freebsd-ports@FreeBSD.ORG  Tue Nov 27 13:27:06 2012
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Delivered-To: ports@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id 98BB84AE;
 Tue, 27 Nov 2012 13:27:06 +0000 (UTC)
 (envelope-from cvs-src@yandex.ru)
Received: from forward2h.mail.yandex.net (forward2h.mail.yandex.net
 [IPv6:2a02:6b8:0:f05::2])
 by mx1.freebsd.org (Postfix) with ESMTP id 04BA98FC08;
 Tue, 27 Nov 2012 13:27:06 +0000 (UTC)
Received: from smtp4h.mail.yandex.net (smtp4h.mail.yandex.net [84.201.186.21])
 by forward2h.mail.yandex.net (Yandex) with ESMTP id CD3C77010D9;
 Tue, 27 Nov 2012 17:27:04 +0400 (MSK)
Received: from smtp4h.mail.yandex.net (localhost [127.0.0.1])
 by smtp4h.mail.yandex.net (Yandex) with ESMTP id 819932C046B;
 Tue, 27 Nov 2012 17:27:04 +0400 (MSK)
Received: from unknown (unknown [77.66.155.61])
 by smtp4h.mail.yandex.net (nwsmtp/Yandex) with ESMTP id R2GONG9l-R3G0xMLq;
 Tue, 27 Nov 2012 17:27:04 +0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
 t=1354022824; bh=mIhxm/Fwpjl96GfV9wMObEADQ2jjH2chIXDJv+JBFl8=;
 h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject:
 References:In-Reply-To:Content-Type:Content-Transfer-Encoding;
 b=VLPCEEv/4VChoILLMoNJ0r3uP/vQc4PvWr0gUUVSG++EhohpznE/J3uaaVDRC+P9F
 5QgP+Dqc+rZhi4kpZ5lPgHmFpCooSkvM4XEkc3o0wEyQ0AFojjU+PIA+FVN91+2O8l
 JgcWtkl74SbXlom5EJcQOUt1llr1HfVm4Bn5aslU=
Message-ID: <50B4BF95.8080704@yandex.ru>
Date: Tue, 27 Nov 2012 17:26:45 +0400
From: Ruslan Mahmatkhanov <cvs-src@yandex.ru>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: "Hans Fr. Nordhaug" <hans@nordhaug.priv.no>
Subject: Re: Fwd: [Full-disclosure] Possible infection of Piwik 1.9.2 download
 archive
References: <50B3CE75.9060107@grobecker-wtal.de> <50B4B6E9.9020605@yandex.ru>
 <20121127131905.GA3839@hiMolde.no>
In-Reply-To: <20121127131905.GA3839@hiMolde.no>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: FreeBSD Ports Mailing List <ports@freebsd.org>, ports-secteam@freebsd.org
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Nov 2012 13:27:06 -0000

Hans Fr. Nordhaug wrote on 27.11.2012 17:19:
> Hi,
>
> I just noticed http://piwik.org/blog/2012/11/security-report-piwik-org-webserver-hacked-for-a-few-hours-on-2012-nov-26th/
> before I got this message.
>
> I downloaded http://builds.piwik.org/piwik-1.9.2.tar.gz
> and compared it to my local copy of 1.9.2, and all files are unchanged.
> It's just the archiving that changed the file size. The Piwik build
> manager is a little bit sloppy ...
>
> Regards,
> Hans

Ok, but distinfo should be updated anyway because of this change. Would 
you please put original distfile somewhere? And if you approve, I can 
update the distinfo for you.

-- 
Regards,
Ruslan

Tinderboxing kills... the drives.